_MyHideProcess@16
_MyNtDeviceIoControlFile@40
_MyNtResumeThread@8
_PaNTDeviceIoControlFile
_PaNTQueryInfor
_PaNTResumeThread
Static task
static1
Behavioral task
behavioral1
Sample
dc77fa8e83f68a3ab715dfd358f10423_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc77fa8e83f68a3ab715dfd358f10423_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc77fa8e83f68a3ab715dfd358f10423_JaffaCakes118
Size
12KB
MD5
dc77fa8e83f68a3ab715dfd358f10423
SHA1
6d281946c5022529bfbcb9792f079aeefc079da4
SHA256
1b19fb95276892a92ca8c04d62a710f928c76622a0517db0fc4ce1a4d0c68c7b
SHA512
a7c42e1df6f726c68bc285055899f3db50a87b66390c31072840aab733aab5ae752b77003044e166fa3ecc144a0ce6354e56cc335e3ea22ded874460138da821
SSDEEP
192:7FvbRBgtgQs6ZXuwabzdE8PwXeYe1d9nilkrPII0n+Y7rp8qx9:ZNBgvs6Z+wabzdEewceKC+Y7Vx
Checks for missing Authenticode signature.
resource |
---|
dc77fa8e83f68a3ab715dfd358f10423_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ntohs
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetEnvironmentStringsA
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
CloseHandle
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
OpenProcess
RtlUnwind
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteProcessMemory
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
_fdopen
_open_osfhandle
atoi
atol
fclose
_cexit
malloc
memcmp
memcpy
memset
pow
printf
raise
setbuf
strcat
strcmp
strcpy
strncpy
strstr
_MyHideProcess@16
_MyNtDeviceIoControlFile@40
_MyNtResumeThread@8
_PaNTDeviceIoControlFile
_PaNTQueryInfor
_PaNTResumeThread
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ